快速入门:使用 Azure 门户下载审核报告Quickstart: Download an audit report using the Azure portal

在此快速入门中,你将学习如何下载过去 24 小时内租户的审核日志的 CSV 文件。In this quickstart, you learn how to download a CSV file of the audit logs for your tenant for the past 24 hours. 最多可从 Azure 门户下载 250,000 条记录。You can download up to 250,000 records from the Azure portal. 记录按最近时间进行排序,因此默认情况下获取的是最近 250,000 条记录。The records are sorted by most recent so by default, you get the most recent 250,000 records.

先决条件Prerequisites

需要:You need:

  • 一个 Azure Active Directory 租户。An Azure Active Directory tenant.
  • 一位属于该租户的安全管理员、安全读者或全局管理员角色的用户。A user, who is in the Security Administrator, Security Reader, or Global Administrator role for the tenant. 此外,租户中的任何用户都可以访问自己的审核日志。In addition, any user in the tenant can access their own audit logs.

快速入门:下载审核报表Quickstart: Download an audit report

  1. 导航到 Azure 门户Navigate to the Azure portal.
  2. 从左侧导航窗格中选择 Azure Active Directory,然后使用“切换目录”按钮选择活动目录。Select Azure Active Directory from the left navigation pane and use the Switch directory button to select your active directory.
  3. 从仪表板中,选择“Azure Active Directory”,然后选择“审核日志”。From the dashboard, select Azure Active Directory and then select Audit logs.
  4. 在“日期范围”筛选器下拉列表中选择“过去 24 小时”,再选择“应用”以查看过去 24 小时的审核日志。Choose last 24 hours in the Date range filter drop-down and select Apply to view the audit logs for the past 24 hours.
  5. 选择“下载”按钮,选择“CSV”作为文件格式,并指定文件名以下载包含已筛选记录的 CSV 文件。Select the Download button, select CSV as the file format and specify a file name to download a CSV file containing the filtered records.

报告

后续步骤Next steps